Business
Chapter 9 Network Management
Computer Networking: A Top Down Approach 6th edition Jim Kurose, Keith Ross Addison-Wesley March 2012
A note on the use of these ppt slides:
We’re making these slides freely available to all (faculty, students, readers). They’re in PowerPoint form so you see the animations; and can add, modify, and delete slides (including this one) and slide content to suit your needs. They obviously represent a lot of work on our part. In return for use, we only ask the following:
If you use these slides (e.g., in a class) that you mention their source (after all, we’d like people to use our book!)
If you post any slides on a www site, that you note that they are adapted from (or perhaps identical to) our slides, and note our copyright of this material.
Thanks and enjoy! JFK/KWR
All material copyright 1996-2012
J.F Kurose and K.W. Ross, All Rights Reserved
Network Management
9-1
Network Management
9-2
Chapter 9: Network Management
Chapter goals:
introduction to network management
motivation
major components
Internet network management framework
MIB: management information base
SMI: Structure of Management Information, data definition language
SNMP: protocol for network management
security and administration
2
Network Management
9-3
Chapter 9 outline
What is network management?
Internet-standard management framework
Structure of Management Information: SMI
Management Information Base: MIB
SNMP Protocol Operations and Transport Mappings
Security and Administration
3
Network Management
9-4
What is network management?
autonomous systems (aka “network”): 1000s of interacting hardware/software components
other complex systems requiring monitoring, control:
jet airplane
nuclear power plant
others?
"Network management includes the deployment, integration
and coordination of the hardware, software, and human
elements to monitor, test, poll, configure, analyze, evaluate,
and control the network and element resources to meet the
real-time, operational performance, and Quality of Service
requirements at a reasonable cost."
4
Network Management
9-5
Infrastructure for network management
managed device
managed device
managed device
managed device
definitions:
managed devices contain
managed objects whose
data is gathered into a
Management Information
Base (MIB)
managing
entity
data
managing entity
agent
data
agent
data
agent
data
agent
data
network
management
protocol
managed device
agent
data
5
Network Management
9-6
Network management standards
OSI CMIP
Common Management Information Protocol
designed 1980’s: the unifying net management standard
too slowly standardized
SNMP: Simple Network Management Protocol
Internet roots (SGMP)
deployed, adopted rapidly
growth: size, complexity
currently: SNMP V3
de facto network management standard
6
Network Management
9-7
What is network management?
Internet-standard management framework
Structure of Management Information: SMI
Management Information Base: MIB
SNMP Protocol Operations and Transport Mappings
Security and Administration
Chapter 9 outline
7
Network Management
9-8
SNMP overview: 4 key parts
Management information base (MIB):
distributed information store of network management data
Structure of Management Information (SMI):
data definition language for MIB objects
SNMP protocol
convey manager<->managed object info, commands
security, administration capabilities
major addition in SNMPv3
8
Network Management
9-9
SNMP naming
question: how to name every possible standard object (protocol, data, more..) in every possible network standard??
answer: ISO Object Identifier tree:
hierarchical naming of all objects
each branch point has name, number
1.3.6.1.2.1.7.1
ISO
ISO-ident. Org.
US DoD
Internet
udpInDatagrams
UDP
MIB2
management
9
Network Management
9-10
OSI Object Identifier Tree
10
Network Management
9-11
SNMP protocol
Two ways to convey MIB info, commands:
agent
data
managed device
managing
entity
agent
data
managed device
managing
entity
trap msg
request
request/response mode
trap mode
response
11
Network Management
9-12
SNMP security and administration
encryption: DES-encrypt SNMP message
authentication: compute, send MIC(m,k): compute hash (MIC) over message (m), secret shared key (k)
protection against playback: use nonce
view-based access control:
SNMP entity maintains database of access rights, policies for various users
database itself accessible as managed object!
12
Network Management
9-13
Network management: summary
network management
extremely important: 80% of network “cost”
SNMP protocol as a tool for conveying information
network management: more art than science
what to measure/monitor
how to respond to failures?
alarm correlation/filtering?
13